Cerebrum

Wire-speed packet filtering using eBPF/XDP in native mode. On the Edge, every port is wired straight to the CPU — no switching ASIC in the path. Max adds BlueField-3 DPUs for hardware offload.

The Edge runs one or two NXP LX2160A SoCs, each with 16x Arm Cortex-A72 cores at up to 2.0 GHz. Max runs an NVIDIA Grace C1 with 72 Arm Neoverse V2 cores. Hardware AES acceleration and virtualization on every model.

The Edge pairs dedicated SFP/SFP+ ports with one OCP 3.0 NIC, all directly connected to the CPU. Max takes its network cards in PCIe Gen5 slots and adds dedicated management ports.

The Edge carries 60GB eMMC per SoC with MicroSD and M.2/mSATA expansion, and one OCP 3.0 NIC slot. Max uses E1.S and M.2 NVMe on PCIe Gen5, with PCIe Gen5 x16 slots for DPUs or GPUs.

Identify applications and threats by their network behavior, even through encryption. Full JA4+ suite — TCP, TLS, HTTP, SSH, DHCP fingerprints at wire speed.

Run IDS/IPS signatures alongside eBPF-based detection. Threat intelligence feeds, geo-IP filtering, and automated response — all inline.

Built for Secure Access Service Edge, Broadband Network Gateway, and WAN edge deployments. Full Linux software stack with DPDK and VPP support.

Deploy sensors at every network edge. Monitor throughput, power, temperature, and threat stats across your entire fleet from a single dashboard.